CVE-2024-52533

Опубликовано: 11 нояб. 2024

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

Ссылки

https://gitlab.gnome.org/GNOME/glib/-/issues/3461
Exploit
Issue Tracking
https://gitlab.gnome.org/GNOME/glib/-/releases/2.82.1
Release Notes
https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home
Vendor Advisory
http://www.openwall.com/lists/oss-security/2024/11/12/11
Mailing List
https://lists.debian.org/debian-lts-announce/2024/11/msg00020.html
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20241206-0009/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*

Версия до 2.82.1 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*

cpe:2.3:a:netapp:ontap_tools:10:*:*:*:*:vmware_vsphere:*:*

EPSS

Процентиль: 85%

0.02455

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVE-2024-52533

CVSS3: 9.8

ubuntu

12 месяцев назад

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

CVE-2024-52533

CVSS3: 7

redhat

12 месяцев назад

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

CVE-2024-52533

CVSS3: 9.8

msrc

12 месяцев назад

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

CVE-2024-52533

CVSS3: 9.8

debian

12 месяцев назад

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one erro ...

SUSE-SU-2024:4254-1

suse-cvrf

11 месяцев назад

Security update for glib2

EPSS

Процентиль: 85%

0.02455

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-120